Benjamin Beale

I have a range of quality engineering experience which includes functional testing, security testing, test planning, automated test development, along with the integration of workflow and test tooling for the team -- some of which from third party vendors, with another being a project of my own.

I am knowledgable of current QE processes. I am equally, if not more comfortable with opening up a code editor alongside of a test session to obtain insight that can only be gained by looking under the hood.

Perhaps more importantly, I am aware of the impact that a well-designed and thorough quality engineering program can have on the number of bugs or defects. Even those that are related to security.

I am highly motivated by studying the ways in which software behavior can differ from what the end user might expect.

Many vulnerabilities can be uncovered using static and dynamic analysis techniques on either the underlying source code or binaries. My time reviewing bug bounty vulnerability submissions showed me that these vulnerabilities do not always present themselves in places that can be directly affected by users. Nevertheless, their potential to chain with other vulnerabilities necessitates their mitigation as well.

Among my vulnerability findings include reflected and stored XSS, SQL injections, and a particularly interesting multipart session vulnerability in a learning management system. To see more about my disclosures and mitigations, scroll down to the Projects section.